Shopify's vape exit shows platform risk is a category decision, not a listings problem

Shopify sent notices on 24 June 2026 telling merchants selling Electronic Nicotine Delivery Systems to remove those products, with the deadline falling on 7 to 8 July 2026 ^[1][2]. Reuters reported the notices and Shopify confirmed to the news agency that they were authentic while declining to comment further ^[3]. The consequence for operators is that the unit of enforcement was the category, not the listing, and the decision landed on merchants who were trading lawfully in their own jurisdictions ^[4][5].

The scope was drawn wide. The notice covered hardware, e-liquids, pods, disposables, coils and accessories, which meant mixed-inventory retailers cut far more than one product line ^[6][7]. It applied whether or not a product carried FDA authorisation, so compliance work a merchant had already paid for bought nothing ^[8][9].

The arithmetic explains why per-listing vetting was never the path. The FDA lists 45 e-cigarette products authorised for sale, and those are the only ENDS products that may lawfully be sold in the United States ^[10]. A 2026 study in BMC Public Health sampled 58 online e-cigarette stores and found 51 of them, 88%, appeared to violate at least one federal rule under the Prevent All Cigarette Trafficking Act ^[11]; the most common breach was shipping through a restricted carrier, found at 45 stores ^[12]. The same research found Shopify served 50% of the sampled stores, and 90% of those appeared to breach at least one federal rule ^[13]. Filtering by federal authorisation would have emptied almost every catalogue anyway ^[14].

The part that should concern anyone building on hosted infrastructure is reach. A spokesperson for California Attorney General Rob Bonta told Reuters that Shopify's decision applies globally ^[15]. Single-use vapes have been illegal to sell in England since 1 June 2025 under the Environmental Protection (Single-use Vapes) (England) Regulations 2024, while reusable devices stayed lawful ^[16]. Selling vapes online in the United Kingdom remains lawful under local rules, with an age of sale of 18 and a requirement that products appear on the MHRA notified list ^[17]. A British retailer stocking only reusable devices was therefore compliant with British law and still lost its listings, closed by a supplier's policy rather than a regulator's order ^[18].

Shopify's published Acceptable Use Policy does not name vaping products ^[19]. Policy silence in a hosted platform is not a guarantee that a category is safe to build on.

The pressure arrived in stages rather than overnight. In November 2025 a bipartisan coalition of 25 attorneys general, joined by the City of New York, wrote to Shopify about illegal tobacco sales on the platform, and by 24 June 2026 offices including Illinois and Connecticut were publishing statements welcoming a full ban ^[20][21]. That is roughly seven months of visible signal before the two-week removal window ^[22][23].

Watch payments next. The same coalition wrote to nine payment companies in April 2026, which makes the processor a second dependency for any store in this category ^[24]. Card processors currently treat these products as regulated rather than forbidden: Stripe lists tobacco, including e-cigarettes, as a restricted business requiring extra due diligence ^[25]. The question for merchants in adjacent regulated categories is whether their processor also decides that policing listings costs more than exiting the category. Note the provenance here: the account setting out this timeline is a developer write-up that also includes instructions for migrating a vape store from Shopify to Medusa ^[26].